INDIAN INSTITUTE OF BANKING & FINANCE (An ISO 9001 - 2008 CERTIFIED ORGANISATION) Kohinoor City, Commercial-II, Tower-1, 2nd Floor, Kirol Road, Kurla (West), Mumbai - 400 070

Web-site : www.iibf.org.in

Certificate Examination in IT Security Rules & Syllabus 2012 OBJECTIVE The objective of the course is to make the bank employees aware of the IT security requirements and proper implementation thereof for protecting organizational interest. This course has been developed on the basis of discussions that a committee of IBA had on IT security based on Goplakrishnan Committee Report. ELIGIBILITY Employees of a Bank or Financial Institutions. SUBJECT OF EXAMINATION IT Security EXAMINATION FEES Particulars

For Members

For Non-members subject to eligibility

First attempt

`1,000/-

@`1,500/-

Subsequent each attempt

`1,000/-

`1,000/-

@Includes registration fee of `500/-. MEDIUM OF EXAMINATION Examination will be conducted in English only. PATTERN OF EXAMINATION Question Paper will contain approximately 120 multiple - choice objective type questions. Examination will be conducted in online mode only. 1

DURATION OF EXAMINATION Examination will be of 2 hours duration. PERIODICITY OF EXAMINATION The Examination will be conducted in June / December on a Sunday. PASSING CRITERIA The candidate will have to secure a minimum of 50% marks in the subject to pass. PROCEDURE FOR APPLYING FOR EXAMINATION Examination Application Forms will be available at the Institute’s website www.iibf.org.in which could be downloaded and filled in. The application forms will also be available at the Institute’s Zonal Offices, Corporate Office and also at such other centres / offices as may be notified from time to time. Examination Application Forms duly filled in (for the detailed instructions refer the Examination Application Form) along with requisite examination fee should be submitted to the respective Zonal Office at Mumbai, Chennai, New Delhi, Kolkata. The Institute accepts no responsibility for delay or inconvenience arising from the candidate’s failure to reach the Examination Application Form in time or if the form is incomplete or failure to furnish all the essential information about himself / herself and the details of his / her examination. PROOF OF IDENTITY Non-members applying for Institute's exams / courses are required to submit a copy of any one of the following documents along with Examination Application Form. Forms without the same shall be liable to be rejected. 1) Photo i/card issued by Employer or 2) PAN Card or 3) Driving License or 4) Election Voter's i/card or 5) Passport or 6) Aadhaar

2

STUDY MATERIAL The Institute has published study books to facilitate study and they will be available at outlets / showrooms / distributors of M/s. Taxmann Publication Pvt. Ltd. The price of each book and detail list of outlets is mentioned below. Candidates may purchase directly from outlets / showrooms / distributors of the above. Candidates who purchase books directly from outlets of publishers will be offered a discount of 20% on the cost price of the book. Candidates desirous of purchasing books by post will not be offered any discount. However the postage will be borne by publishers. Candidates would be required to send their indent to publishers’ outlet along with a Demand Draft for the cost of book/s. The Demand Draft should be drawn in favour of M/s. Taxmann Publication Pvt. Ltd. (No cheques will be accepted). Candidates are requested not to send any request for the purchase of books to the Institute’s Zonal Offices / Corporate Office. Name of the Book

Price

IT Security

`395/-

3

ADDRESSES OF TAXMANN PUBLICATION PVT. LTD. BRANCHES & SHOWROOMS Jaina Book Agency 649-A, Girgaum Road, Dhobi Talao, Mumbai - 400 002 Tel. : 22012143, 22018485 Asia Law House Shop No. 10, Aiyangar Plaza, Between UTI & Central Bank Bank Street Kothi, Hyderabad - 500 095 Tel. : 24742324 Standard Book Distributors 104, Labh Complex, 12-B, Sattar Taluka Society, Opp.Old High Court Rd., Ahmedabad - 380 014 Tel. : 7540731,7540732 Student Book Centre 527, Kalbadevi Road, Opp. Edward Cinema, Mumbai - 400 002 Tel. : 22050510, 22080668 Commercial House 149, Rajendra Market, Opp. Tis Hazari Court, Delhi - 110 054 Tel. : 23947862, 23947863 Book Corporation 4, R. N. Mukherjee Road, Kolkata - 700 001 Tel. : 22101089, 22206669, 31000405 Student Agencies (I) Pvt. Ltd. 102, Konark Shram, Behind Everest Building, 156,Tardeo Road, Mumbai - 400 034 Tel. : 2351334-37 C. Sitaraman & Co., 37, Royapettah High Road, Chennai-600 014 Tel. : 28111516, 28117069, 28113950 Law Point 6C, R. N. Mukherjee Road, Opp. Birla Building, Stephen House, Kolkata - 700 011 Tel. : 22101821

Krishna Law House 35-36, Gokhale Market, Opp. Tis Hazari Court, Delhi -110 054 Tel. : 23969866, 23919317 Book Corporation 108, Nandan Complex, Near Mithkhali Rly. Crossing, Mithakhali, Ahmedabad - 380006 Tel. : 6465385 Puliani & Puliani Ground Floor, Sujatha Complex, 1st Cross Gandhinagar, Bangalore - 560 009 Tel. : 2265500, 2254052 Modern Law House 1/1, A. D. A. Flat, (Near Bishop Johnson School), M. G. Marg, Allahabad - 211001 Tel. : 2560700, 2560616 Arora Law Agency Shivala Road, Hussainpura, Amritsar - 143 001 Tel. : 2584548 Commercial Book House LG-2, 23, Aakarshan Bhawan, Anasari Road, Darya Ganj, New Delhi - 110 002 Tel. : 23267860 M/s. Taxmann Publication Pvt. Ltd. 35, Bodke Building, M.G. Road, Opp. Mulund Railway Station, Mulund (West), Mumbai - 400 080 Tel. : 022-25934807/32516684/25644807 E-mail: [email protected] M/s. Taxmann Publication Pvt. Ltd. 59/32, New Rohtak Road, New Delhi - 110 005 Tel. : 011-45562222 E-mail: [email protected] M/s. Taxmann Publication Pvt. Ltd. 7, Abhinav Arcade, Ground Floor, Nr. Bank of Baroda, Pritam Nagar, Paldi, Ahmedabad - 380 007 Cell : 9909984900 E-mail: [email protected]

SYLLABUS The details of the prescribed syllabus which is indicative are furnished below. However, keeping in view the professional nature of examinations, all matters falling within the realm of the subject concerned will have to be studied by the candidate as questions can be asked on all relevant matters under the subject. Candidates appearing for the Examination should particularly prepare themselves for answering questions that may be asked on the latest developments taking place under the various subjects of the said examination although those topics may not have been specifically included in the syllabus. The Institute also reserves to itself the right to vary the syllabus / rules / fee structure from time to time. Any alterations made will be notified from time to time. Further, questions based on current developments in banking and finance may be asked. Candidates are advised to refer to financial news papers / periodicals more particularly "IIBF VISION" and "BANK QUEST" published by the Institute. 4

SYLLABUS Module - A : IT Security Overview 1. Introduction to Information Security 2. Corporate IT Security Policy 3. Organizational Security a. Risk Assessment b. Information Classification 4. Security Governance a. Policies b. Framework c.

Roles & Responsibilities

d. Compliance to Policies e. Training & Awareness f.

Monitoring

5. Physical & Environmental Security 6. Hardware / Software Security 7. Operational Security 8. Security Standards Module - B : IT Security Controls 9. Asset Classification and Control 10. Physical & Environmental Security Controls 11. Hardware / Software Security Controls l Software Applications

& Operating Systems

l Databases

12. Computer Networks & Devices( wired & wireless technologies) l Security

Solutions (IDS, IPS, Fire Wall, VPN etc)

l Logical l Cryptography

5

13. Software Development & Maintenance l In-house

development

l Outsourcing

Module - C : IT Security Threats 14. Security Threats overview l Network l Internet l Non

related / Application

Technical / internal

l Social

Engineering

l Espionage l Cyber

& embezzlement

Terrorism etc

15. Overview of Computer Malwares l Overview l Policy

16. Detection & Prevention of Computer Malwares 17. Incident Management 18. Fault Tolerant Systems 19. Business Continuity & Disaster Recovery Module - D : IS Audit & Regulatory Compliance 20. IS Audit a. Framework b. Policies c.

Charter

d. Planning e. Methodology f.

Audit Findings & Closure Procedures

21. Regulatory Compliances a. Overview b. Identification of compliances applicable c.

Review of Compliances

6

COURSES OF IIBF Flagship Courses + JAIIB + CAIIB + Diploma in Banking & Finance B. Specialised Post Graduate Diploma Courses (for Member* and Non-Members**) + Diploma in Treasury, Investment and Risk Management + Diploma in Banking Technology + Diploma in International Banking and Finance + Diploma in Urban Co-operative Bank + Diploma in Commodity Derivatives for Bankers + Advanced Wealth Management Course + Diploma in Home Loan Advising C. Specialised Certificate Courses (for Member* and Non-Members**) + Certificate in Trade Finance + Certified Information System Banker + Certificate in Anti-Money Laundering / Know Your Customer + Certificate in Quantitative Methods for Bankers + Certificate in Credit Cards for Bankers + Certificate Examination in Banking Oriented Paper in Hindi + Certificate Examination in SME Finance for Bankers + Certificate Examination in Customer Service & Banking Codes and Standards + Certificate Examination in Prevention of Crimes and Fraud Management + Certificate Examination in Foreign Exchange Facilities for Individuals + Certificate Examination in IT Security + Certificate Examination in Rural Banking Operations for RRB Staff + Certificate Examination in Microfinance + Certificate Examination in Basics of Banking / Credit Cards for employees of IT Companies + Certificate Course for Business Correspondents / Business Facilitators + Certificate Examination for Debt Recovery Agents D. Management Courses + Advanced Management Program in collaboration with SIES - Mumbai, WelingkarMumbai, IMI-Delhi, IPE-Hyderabad. + Project Finance Management Blended Course with IFMR, Chennai + CAIIB linked MBA with IGNOU. Educational support : + Publishing specific courseware for each paper / examination and Workbooks etc. + Tutorials through Accredited Institutions, Virtual Classes, e-learning through Portal, Contact Classes or Campus Training - Model Questions and subject updates on the net Other activities : + Research, Seminars, Conferences, Lectures, etc. + Publications of books, Daily e-newsletter, monthly newsletter and quarterly journal + Training & Consultancy and Financial Education * Members are employees of Banks and Financial Institutions who have enrolled as members of IIBF. ** Non-Members are eligible candidates for each course / examination without IIBF Membership. The Syllabi, Rules / Regulations, Examination Forms and other information pertaining to the examinations are available with Institute's Offices at Mumbai, Chennai, New Delhi, Kolkata and also at such other centers / offices as may be notified from time to time. The same is also available at our website www.iibf.org.in. A.

7

MEMBERS OF THE GOVERNING COUNCIL (As on 01/07/2012) PRESIDENT

Shri Arun Kaul, Chairman & Managing Director, UCO Bank

Shri M. D. Mallya, Chairman & Managing Director, Bank of Baroda

Shri M. Narendra, Chairman & Managing Director, Indian Overseas Bank

VICE PRESIDENTS

Shri T. M. Bhasin, Chairman & Managing Director, Indian Bank

Shri K. R. Kamath, Chairman & Managing Director, Punjab National Bank

Representing Financial Institutions

Shri Rana Kapoor, Managing Director & Chief Executive Officer, YES Bank

Shri T. C. A. Ranganathan, Chairman & Managing Director, Export -Import Bank of India

Representing Reserve Bank of India Shri S. Karuppasamy, Executive Director

Representing Private Sector Banks

Representing State Bank of India and its Associate Banks

Shri Ananthakrishna, Chairman, Karnataka Bank Ltd.

Shri Pratip Chaudhuri, Chairman, State Bank of India

Representing Co-operative Banks Shri S. K. Banerji, Managing Director, The Saraswat Co-op. Bank Ltd.

Smt. Arundhati Bhattacharya, Deputy Managing Director & CDO, State Bank of India

Representing other Bodies / Experts Shri M. Balachandran, Director, Institute of Banking Personnel Selection

Representing Public Sector Banks Shri A. K. Misra, Chairman & Managing Director, Bank of India

Prof. Y. K. Bhushan, Senior Advisor, ICFAI Business School

Shri S. Raman, Chairman & Managing Director, Canara Bank

Shri Allen C. A. Pereira, Director, National Institute of Bank Management (NIBM)

Shri M. V. Tanksale, Chairman & Managing Director, Central Bank of India

Dr. K. Ramakrishnan, Chief Executive, Indian Banks’ Association (IBA) From IIBF

Shri J. P. Dua, Chairman & Managing Director, Allahabad Bank

Dr. R. Bhaskaran, Chief Executive Officer

ADDRESSES FOR CONTACT Corporate Office :

Northern Zonal Office :

Western Zonal Office :

Indian Institute of Banking & Finance 109-113, Vikrant Towers, 1st Floor, 4, Rajendra Place, New Delhi - 110 008 Tel. : 91-011-2575 2191/92 Fax : 91-011-2575 2193 E-mail : [email protected]

Indian Institute of Banking & Finance 191-F, Maker Towers, 19th Floor, Cuffe Parade, Mumbai - 400 005 Tel. : 022-2218 3302 / 2218 5134 Fax : 022-2218 0845 E-mail : [email protected]

Southern Zonal Office :

Eastern Zonal Office :

Indian Institute of Banking & Finance No.94, Jawaharlal Nehru Road, (100 Feet Road), Opp. Hotel Ambica Empire, Vadapalani, Chennai - 600 026 Tel. : 044-2472 2990/2472 7961 Fax : 044-2472 6966 E-mail : [email protected]

Indian Institute of Banking & Finance 408, 'Anandlok', 'A' Block, 4th Floor, 227, Acharya J. C. Bose Road, Kolkata - 700 020 Tel. : 033-2280 9681/82/83 Fax : 033-2280 9680 E-mail : [email protected] 8

Quality Printers (I) Ph. 24922297

Indian Institute of Banking & Finance Kohinoor City, Commercial-II, Tower-1, 2nd Floor, Kirol Road, Kurla (West), Mumbai - 400 070 Tel : 022-2503 9746 / 9604 / 9907 Fax : 022-2503 7332 E-mail : [email protected]